open-tag 0.1.1 → 0.1.2

package/dist/index.d.mts

@@ -4188,7 +4188,7 @@ declare namespace external_d_exports {
   export { $brand, $input, $output, BRAND, CompileOptions, GlobalMeta, Infer, IssueData, JSONType, NEVER, $RefinementCtx as RefinementCtx, SafeExtendShape, Schema, TimePrecision, TypeOf, ZodAny, ZodArray, ZodBase64, ZodBase64URL, ZodBigInt, ZodBigIntFormat, ZodBoolean, ZodCIDRv4, ZodCIDRv6, ZodCUID, ZodCUID2, ZodCatch, ZodCodec, ZodCoercedBigInt, ZodCoercedBoolean, ZodCoercedDate, ZodCoercedNumber, ZodCoercedString, ZodCompileAsyncError, ZodCompileUnsupportedError, ZodCreditCard, ZodCustom, ZodCustomStringFormat, ZodDate, ZodDefault, ZodDiscriminatedUnion, ZodE164, ZodEmail, ZodEmoji, ZodEnum, ZodError, ZodErrorMap, ZodExactOptional, ZodFile, ZodFirstPartySchemaTypes, ZodFirstPartyTypeKind, ZodFlattenedError, ZodFloat32, ZodFloat64, ZodFormattedError, ZodFunction, ZodGUID, ZodIPv4, ZodIPv6, ZodISODate, ZodISODateTime, ZodISODuration, ZodISOTime, ZodInt, ZodInt32, ZodInt64, ZodIntersection, ZodIssue, ZodIssueCode, ZodJSONSchema, ZodJSONSchemaInternals, ZodJWT, ZodKSUID, ZodLazy, ZodLiteral, ZodMAC, ZodMap, ZodNaN, ZodNanoID, ZodNever, ZodNonOptional, ZodNull, ZodNullable, ZodNumber, ZodNumberFormat, ZodObject, ZodOptional, ZodPipe, ZodPrefault, ZodPreprocess, ZodPromise, ZodRawShape, ZodReadonly, ZodRealError, ZodRecord, ZodSafeParseError, ZodSafeParseResult, ZodSafeParseSuccess, ZodSchema, ZodSet, ZodStandardSchemaWithJSON, ZodString, ZodStringFormat, ZodSuccess, ZodSymbol, ZodTemplateLiteral, ZodTransform, ZodTuple, ZodType, ZodTypeAny, ZodUInt32, ZodUInt64, ZodULID, ZodURL, ZodUUID, ZodUndefined, ZodUnion, ZodUnknown, ZodVoid, ZodXID, ZodXor, _ZodBigInt, _ZodBoolean, _ZodDate, _ZodNumber, _ZodString, _ZodType, _default, _function, any, array, base64, base64url, bigint$1 as bigint, boolean$1 as boolean, _catch as catch, check, cidrv4, cidrv6, clone, codec, coerce_d_exports as coerce, compile, config, index_d_exports$1 as core, creditCard, cuid, cuid2, custom, date$2 as date, decode, decodeAsync, deepPartial, describe, discriminatedUnion, e164, email, emoji, encode, encodeAsync, _endsWith as endsWith, _enum as enum, exactOptional, file, flattenError, float32, float64, formatError, fromJSONSchema, _function as function, getDiscriminatedOption, getErrorMap, globalRegistry, _gt as gt, _gte as gte, guid, hash, hex, hostname, httpUrl, _includes as includes, output$1 as infer, inferFlattenedErrors, inferFormattedError, input, _instanceof as instanceof, int, int32, int64, intersection, invertCodec, ipv4, ipv6, iso_d_exports as iso, json, jwt, keyof, ksuid, lazy, _length as length, literal, index_d_exports$2 as locales, looseObject, looseRecord, _lowercase as lowercase, _lt as lt, _lte as lte, mac, map, _maxLength as maxLength, _maxSize as maxSize, memoizer, meta, _mime as mime, _minLength as minLength, _minSize as minSize, _multipleOf as multipleOf, nan, nanoid, nativeEnum, _negative as negative, never, _nonnegative as nonnegative, nonoptional, _nonpositive as nonpositive, _normalize as normalize, _null as null, nullable, nullish, number$1 as number, object, optional, output, _overwrite as overwrite, parse, parseAsync, partialRecord, pipe, _positive as positive, prefault, preprocess, prettifyError, promise, _properties as properties, _property as property, readonly, record, refine, _regex as regex, regexes_d_exports as regexes, registry, safeDecode, safeDecodeAsync, safeEncode, safeEncodeAsync, safeParse, safeParseAsync, set, setErrorMap, _size as size, _slugify as slugify, _startsWith as startsWith, strictObject, string$1 as string, stringFormat, stringbool, success, superRefine, symbol, templateLiteral, toJSONSchema, _toLowerCase as toLowerCase, _toUpperCase as toUpperCase, toZod, transform, treeifyError, _trim as trim, tuple, uint32, uint64, ulid, _undefined as undefined, union, unknown, _uppercase as uppercase, url, util_d_exports as util, uuid, uuidv4, uuidv6, uuidv7, validate, validateAsync, _void as void, xid, xor };
 }
 //#endregion
-//#region ../../packages/shared/dist/task-BKi0lN9_.d.mts
+//#region ../../packages/shared/dist/task-CJjpDFO8.d.mts
 declare const AccountComputerSummarySchema: ZodObject<{
   computerId: ZodString;
   kind: ZodOptional<ZodEnum<{
@@ -4767,6 +4767,7 @@ declare const ErrorCodeSchema: ZodEnum<{
   AGENT_SELF_CONFIGURATION_DISABLED: "AGENT_SELF_CONFIGURATION_DISABLED";
   AUTH_CODE_CONSUMED: "AUTH_CODE_CONSUMED";
   AUTH_CODE_EXPIRED: "AUTH_CODE_EXPIRED";
+  AUTH_CODE_PURPOSE_MISMATCH: "AUTH_CODE_PURPOSE_MISMATCH";
   AUTH_DEV_USER_UNAVAILABLE: "AUTH_DEV_USER_UNAVAILABLE";
   AUTH_EMAIL_CONFLICT: "AUTH_EMAIL_CONFLICT";
   AUTH_IDENTITY_CONFLICT: "AUTH_IDENTITY_CONFLICT";
@@ -4776,6 +4777,7 @@ declare const ErrorCodeSchema: ZodEnum<{
   AUTH_PROVIDER_DISABLED: "AUTH_PROVIDER_DISABLED";
   AUTH_USER_MISMATCH: "AUTH_USER_MISMATCH";
   AUTH_USER_SUSPENDED: "AUTH_USER_SUSPENDED";
+  CLOUD_BILLING_UNAVAILABLE: "CLOUD_BILLING_UNAVAILABLE";
   CLOUD_CAPACITY_EXCEEDED: "CLOUD_CAPACITY_EXCEEDED";
   CLOUD_MODEL_NOT_ALLOWED: "CLOUD_MODEL_NOT_ALLOWED";
   CLOUD_MODEL_UNAVAILABLE: "CLOUD_MODEL_UNAVAILABLE";
@@ -6877,6 +6879,256 @@ declare const InstallSkillPresetResponseSchema: ZodObject<{
   }, $strict>;
 }, $strict>;
 type InstallSkillPresetResponse = output$1<typeof InstallSkillPresetResponseSchema>;
+declare const ProvisionSlackAgentRequestSchema: ZodObject<{
+  code: ZodString;
+  agent: ZodObject<{
+    creationIntentId: ZodNonOptional<ZodOptional<ZodString>>;
+    name: ZodString;
+    displayName: ZodString;
+    runtimeProvider: ZodEnum<{
+      "claude-code": "claude-code";
+      codex: "codex";
+      pi: "pi";
+    }>;
+    runtimeConfig: ZodOptional<ZodObject<{
+      model: ZodOptional<ZodNullable<ZodString>>;
+      reasoningEffort: ZodOptional<ZodNullable<ZodString>>;
+      instructions: ZodOptional<ZodString>;
+    }, $strict>>;
+  }, $strict>;
+  slack: ZodObject<{
+    appId: ZodString;
+    teamId: ZodString;
+    botUserId: ZodString;
+    botAccessToken: ZodString;
+    signingSecret: ZodString;
+  }, $strict>;
+}, $strict>;
+declare const ProvisionSlackAgentResponseSchema: ZodObject<{
+  agent: ZodObject<{
+    id: ZodString;
+    name: ZodString;
+    displayName: ZodString;
+    runtimeProvider: ZodEnum<{
+      "claude-code": "claude-code";
+      codex: "codex";
+      pi: "pi";
+    }>;
+    receiveMode: ZodEnum<{
+      all_message: "all_message";
+      mention_only: "mention_only";
+    }>;
+    status: ZodEnum<{
+      active: "active";
+      suspended: "suspended";
+    }>;
+    createdAt: ZodString;
+    updatedAt: ZodString;
+    createdByUserId: ZodString;
+    computerId: ZodNullable<ZodString>;
+    selfConfigurationEnabled: ZodBoolean;
+    revision: ZodNumber;
+    runtimeConfig: ZodObject<{
+      revision: ZodNumber;
+      model: ZodNullable<ZodString>;
+      reasoningEffort: ZodNullable<ZodString>;
+      instructions: ZodString;
+      maxDurationMs: ZodNullable<ZodNumber>;
+      contextTrees: ZodArray<ZodObject<{
+        alias: ZodString;
+        repository: ZodString;
+      }, $strict>>;
+      permissions: ZodObject<{
+        approvalPolicy: ZodDefault<ZodEnum<{
+          never: "never";
+          "on-request": "on-request";
+        }>>;
+        allowCommands: ZodDefault<ZodArray<ZodString>>;
+      }, $strict>;
+    }, $strict>;
+  }, $strict>;
+  slack: ZodObject<{
+    agentDisplayName: ZodString;
+    eventsUrl: ZodString;
+    allowedIntent: ZodNullable<ZodEnum<{
+      create: "create";
+      reauthorize: "reauthorize";
+    }>>;
+    blockedReason: ZodNullable<ZodString>;
+    expectedMessaging: ZodNullable<ZodDiscriminatedUnion<[ZodObject<{
+      kind: ZodLiteral<"unbound">;
+    }, $strict>, ZodObject<{
+      kind: ZodLiteral<"bound">;
+      provider: ZodEnum<{
+        feishu: "feishu";
+        slack: "slack";
+      }>;
+      bindingId: ZodString;
+      credentialGeneration: ZodNumber;
+    }, $strict>], "kind">>;
+    preferredRecovery: ZodEnum<{
+      credentials: "credentials";
+      oauth: "oauth";
+    }>;
+    binding: ZodNullable<ZodObject<{
+      id: ZodString;
+      agentId: ZodString;
+      provider: ZodEnum<{
+        feishu: "feishu";
+        slack: "slack";
+      }>;
+      bindingState: ZodEnum<{
+        active: "active";
+        disabled: "disabled";
+        error: "error";
+        provisioning: "provisioning";
+        reauthorization_required: "reauthorization_required";
+      }>;
+      bot: ZodObject<{
+        displayName: ZodNullable<ZodString>;
+        avatarUrl: ZodNullable<ZodString>;
+      }, $strict>;
+      receiveMode: ZodEnum<{
+        all_message: "all_message";
+        mention_only: "mention_only";
+      }>;
+      lastInboundAt: ZodNullable<ZodString>;
+      lastValidatedAt: ZodNullable<ZodString>;
+      lastRuntimeObservationAt: ZodNullable<ZodString>;
+      identity: ZodDiscriminatedUnion<[ZodObject<{
+        provider: ZodLiteral<"feishu">;
+        appId: ZodString;
+        teamId: ZodNullable<ZodString>;
+        botOpenId: ZodString;
+        teamBrand: ZodNullable<ZodString>;
+      }, $strict>, ZodObject<{
+        provider: ZodLiteral<"slack">;
+        appId: ZodString;
+        teamId: ZodString;
+        enterpriseId: ZodNullable<ZodString>;
+        botUserId: ZodString;
+        appIdEvidence: ZodLiteral<"configured">;
+      }, $strict>], "provider">;
+      credentialGeneration: ZodNumber;
+      grantedCapabilities: ZodArray<ZodString>;
+      reauthorizationRequired: ZodBoolean;
+      lastErrorCode: ZodNullable<ZodString>;
+    }, $strict>>;
+    identityClosure: ZodNullable<ZodObject<{
+      status: ZodEnum<{
+        pending: "pending";
+        verified: "verified";
+      }>;
+      verifiedAt: ZodNullable<ZodString>;
+    }, $strict>>;
+    handoff: ZodNullable<ZodUnion<readonly [ZodObject<{
+      bindingState: ZodLiteral<"active">;
+      handoffReady: ZodLiteral<true>;
+    }, $strict>, ZodObject<{
+      bindingState: ZodLiteral<"active">;
+      handoffReady: ZodLiteral<false>;
+      providerCli: ZodOptional<ZodObject<{
+        phase: ZodEnum<{
+          checking_credentials: "checking_credentials";
+          needs_attention: "needs_attention";
+          preparing_cli: "preparing_cli";
+        }>;
+        reason: ZodOptional<ZodEnum<{
+          credential_rejected: "credential_rejected";
+          global_bin_unavailable: "global_bin_unavailable";
+          identity_mismatch: "identity_mismatch";
+          integrity_failed: "integrity_failed";
+          provider_unreachable: "provider_unreachable";
+          rate_limited: "rate_limited";
+          scope_missing: "scope_missing";
+          unsupported_platform: "unsupported_platform";
+          upgrade_required: "upgrade_required";
+          version_incompatible: "version_incompatible";
+        }>>;
+      }, $strict>>;
+    }, $strict>, ZodObject<{
+      bindingState: ZodEnum<{
+        disabled: "disabled";
+        error: "error";
+        provisioning: "provisioning";
+        reauthorization_required: "reauthorization_required";
+      }>;
+      handoffReady: ZodLiteral<false>;
+    }, $strict>]>>;
+  }, $strict>;
+  interactionsUrl: ZodString;
+}, $strict>;
+type ProvisionSlackAgentRequest = output$1<typeof ProvisionSlackAgentRequestSchema>;
+type ProvisionSlackAgentResponse = output$1<typeof ProvisionSlackAgentResponseSchema>;
+declare const SlackAutoSetupRuntimeRequestSchema: ZodObject<{
+  type: ZodLiteral<"slack:auto-setup">;
+  requestId: ZodString;
+  computerId: ZodString;
+  agentId: ZodString;
+  input: ZodDiscriminatedUnion<[ZodObject<{
+    action: ZodLiteral<"authorize">;
+    force: ZodOptional<ZodBoolean>;
+  }, $strict>, ZodObject<{
+    action: ZodLiteral<"install">;
+    displayName: ZodString;
+    challenge: ZodOptional<ZodString>;
+  }, $strict>, ZodObject<{
+    action: ZodLiteral<"callbacks">;
+    challenge: ZodOptional<ZodString>;
+    teamId: ZodString;
+    botUserId: ZodString;
+    enterpriseId: ZodNullable<ZodString>;
+    appId: ZodString;
+    eventsUrl: ZodString;
+    interactionsUrl: ZodString;
+  }, $strict>], "action">;
+}, $strict>;
+declare const SlackAutoSetupRuntimeResultSchema: ZodObject<{
+  type: ZodLiteral<"slack:auto-setup:result">;
+  requestId: ZodString;
+  result: ZodUnion<readonly [ZodDiscriminatedUnion<[ZodObject<{
+    status: ZodLiteral<"authorization_required">;
+    ticket: ZodString;
+  }, $strict>, ZodObject<{
+    status: ZodLiteral<"authorized">;
+    teamName: ZodString;
+  }, $strict>, ZodObject<{
+    status: ZodLiteral<"connected">;
+  }, $strict>, ZodObject<{
+    status: ZodLiteral<"approval_pending">;
+    appId: ZodString;
+    teamId: ZodString;
+  }, $strict>, ZodObject<{
+    status: ZodLiteral<"failed">;
+    code: ZodEnum<{
+      approval_denied: "approval_denied";
+      authorization_failed: "authorization_failed";
+      busy: "busy";
+      callbacks_failed: "callbacks_failed";
+      capability_missing: "capability_missing";
+      computer_unavailable: "computer_unavailable";
+      create_failed: "create_failed";
+      create_uncertain: "create_uncertain";
+      failed: "failed";
+      install_failed: "install_failed";
+      manual_required: "manual_required";
+    }>;
+    appId: ZodOptional<ZodString>;
+    teamId: ZodOptional<ZodString>;
+    errorCode: ZodOptional<ZodString>;
+  }, $strict>], "status">, ZodObject<{
+    status: ZodLiteral<"installed">;
+    credentials: ZodObject<{
+      appId: ZodString;
+      teamId: ZodString;
+      botUserId: ZodString;
+      botAccessToken: ZodString;
+      signingSecret: ZodString;
+    }, $strict>;
+  }, $strict>]>;
+}, $strict>;
+type SlackAutoSetupRuntimeRequest = output$1<typeof SlackAutoSetupRuntimeRequestSchema>;
+type SlackAutoSetupRuntimeResult = output$1<typeof SlackAutoSetupRuntimeResultSchema>;
 /** The stable high-level class used for operational routing and dashboards. */
 declare const StructuredErrorCategorySchema: ZodEnum<{
   auth: "auth";
@@ -7185,24 +7437,7 @@ declare const RuntimeProviderCliMetadataSchema: ZodDiscriminatedUnion<[ZodObject
 }, $strict>, ZodObject<{
   provider: ZodLiteral<"github">;
   connectionId: ZodString;
-  repositories: ZodArray<ZodObject<{
-    repositoryId: ZodString;
-    fullName: ZodString;
-    role: ZodEnum<{
-      code: "code";
-      context_tree: "context_tree";
-    }>;
-    access: ZodEnum<{
-      read: "read";
-      write: "write";
-    }>;
-    branch: ZodOptional<ZodString>;
-    publish: ZodOptional<ZodEnum<{
-      direct: "direct";
-      pull_request: "pull_request";
-    }>>;
-    workBranchPrefix: ZodOptional<ZodString>;
-  }, $strict>>;
+  authority: ZodLiteral<"user-task">;
 }, $strict>], "provider">;
 type RuntimeProviderCliMetadata = output$1<typeof RuntimeProviderCliMetadataSchema>;
 declare const RuntimeExecutionProviderSchema: ZodDiscriminatedUnion<[ZodObject<{
@@ -7264,24 +7499,7 @@ declare const RuntimeExecutionProviderSchema: ZodDiscriminatedUnion<[ZodObject<{
   cli: ZodObject<{
     provider: ZodLiteral<"github">;
     connectionId: ZodString;
-    repositories: ZodArray<ZodObject<{
-      repositoryId: ZodString;
-      fullName: ZodString;
-      role: ZodEnum<{
-        code: "code";
-        context_tree: "context_tree";
-      }>;
-      access: ZodEnum<{
-        read: "read";
-        write: "write";
-      }>;
-      branch: ZodOptional<ZodString>;
-      publish: ZodOptional<ZodEnum<{
-        direct: "direct";
-        pull_request: "pull_request";
-      }>>;
-      workBranchPrefix: ZodOptional<ZodString>;
-    }, $strict>>;
+    authority: ZodLiteral<"user-task">;
   }, $strict>;
 }, $strict>], "provider">;
 type RuntimeExecutionProvider = output$1<typeof RuntimeExecutionProviderSchema>;
@@ -7350,24 +7568,7 @@ declare const RuntimeExecutionOpenResultSchema: ZodDiscriminatedUnion<[ZodObject
     cli: ZodObject<{
       provider: ZodLiteral<"github">;
       connectionId: ZodString;
-      repositories: ZodArray<ZodObject<{
-        repositoryId: ZodString;
-        fullName: ZodString;
-        role: ZodEnum<{
-          code: "code";
-          context_tree: "context_tree";
-        }>;
-        access: ZodEnum<{
-          read: "read";
-          write: "write";
-        }>;
-        branch: ZodOptional<ZodString>;
-        publish: ZodOptional<ZodEnum<{
-          direct: "direct";
-          pull_request: "pull_request";
-        }>>;
-        workBranchPrefix: ZodOptional<ZodString>;
-      }, $strict>>;
+      authority: ZodLiteral<"user-task">;
     }, $strict>;
   }, $strict>], "provider">>;
   sessionCliProof: ZodOptional<ZodObject<{
@@ -7468,24 +7669,7 @@ declare const RuntimeCredentialResultSchema: ZodDiscriminatedUnion<[ZodObject<{
   }, $strict>, ZodObject<{
     provider: ZodLiteral<"github">;
     connectionId: ZodString;
-    repositories: ZodArray<ZodObject<{
-      repositoryId: ZodString;
-      fullName: ZodString;
-      role: ZodEnum<{
-        code: "code";
-        context_tree: "context_tree";
-      }>;
-      access: ZodEnum<{
-        read: "read";
-        write: "write";
-      }>;
-      branch: ZodOptional<ZodString>;
-      publish: ZodOptional<ZodEnum<{
-        direct: "direct";
-        pull_request: "pull_request";
-      }>>;
-      workBranchPrefix: ZodOptional<ZodString>;
-    }, $strict>>;
+    authority: ZodLiteral<"user-task">;
   }, $strict>], "provider">;
 }, $strict>, ZodObject<{
   type: ZodLiteral<"runtime:credential:result">;
@@ -7581,24 +7765,7 @@ declare const RuntimeCredentialServerFrameSchema: ZodDiscriminatedUnion<[ZodDisc
     cli: ZodObject<{
       provider: ZodLiteral<"github">;
       connectionId: ZodString;
-      repositories: ZodArray<ZodObject<{
-        repositoryId: ZodString;
-        fullName: ZodString;
-        role: ZodEnum<{
-          code: "code";
-          context_tree: "context_tree";
-        }>;
-        access: ZodEnum<{
-          read: "read";
-          write: "write";
-        }>;
-        branch: ZodOptional<ZodString>;
-        publish: ZodOptional<ZodEnum<{
-          direct: "direct";
-          pull_request: "pull_request";
-        }>>;
-        workBranchPrefix: ZodOptional<ZodString>;
-      }, $strict>>;
+      authority: ZodLiteral<"user-task">;
     }, $strict>;
   }, $strict>], "provider">>;
   sessionCliProof: ZodOptional<ZodObject<{
@@ -7697,24 +7864,7 @@ declare const RuntimeCredentialServerFrameSchema: ZodDiscriminatedUnion<[ZodDisc
   }, $strict>, ZodObject<{
     provider: ZodLiteral<"github">;
     connectionId: ZodString;
-    repositories: ZodArray<ZodObject<{
-      repositoryId: ZodString;
-      fullName: ZodString;
-      role: ZodEnum<{
-        code: "code";
-        context_tree: "context_tree";
-      }>;
-      access: ZodEnum<{
-        read: "read";
-        write: "write";
-      }>;
-      branch: ZodOptional<ZodString>;
-      publish: ZodOptional<ZodEnum<{
-        direct: "direct";
-        pull_request: "pull_request";
-      }>>;
-      workBranchPrefix: ZodOptional<ZodString>;
-    }, $strict>>;
+    authority: ZodLiteral<"user-task">;
   }, $strict>], "provider">;
 }, $strict>, ZodObject<{
   type: ZodLiteral<"runtime:credential:result">;
@@ -8015,7 +8165,7 @@ declare const WebToolErrorCodeSchema: ZodEnum<{
 }>;
 type WebToolErrorCode = output$1<typeof WebToolErrorCodeSchema>;
 declare namespace index_d_exports {
-  export { ACCOUNT_IDENTITY_FILE_NAME, AGENT_RUNTIME_BINDING_MAX_BYTES, AGENT_RUNTIME_CONTRACT_VERSION, AGENT_RUNTIME_DESCRIPTION_MAX_BYTES, AGENT_RUNTIME_ID_MAX_BYTES, AGENT_RUNTIME_TEXT_MAX_BYTES, AccessTokenLease, AccessTokenProvider, AccountIdentityRotation, AdmissionController, AdmissionDecision, AdmissionLimits, AdmissionPhase, AdmissionReservation, AdmissionSnapshot, AgentAbortRequest, AgentApprovalResponse, AgentHostedToolCall, AgentHostedToolContent, AgentHostedToolDefinition, AgentHostedToolError, AgentHostedToolHandler, AgentHostedToolResult, AgentHostedTools, AgentInput, AgentInputItem, AgentInteractionRequest, AgentInteractionResponse, AgentOutputItem, AgentPromptRequest, AgentProviderError, AgentProviderRunContext, AgentProviderRunEvent, AgentProviderRunResult, AgentQuestionResponse, AgentRunConfiguration, AgentRunError, AgentRunErrorCode, AgentRunId, AgentRunResult, AgentRunStatus, AgentRuntime, AgentRuntimeBinding, AgentRuntimeCapabilities, AgentRuntimeCliInstallation, AgentRuntimeConfigurationOptionsRequest, AgentRuntimeError, AgentRuntimeErrorCode, AgentRuntimeEvent, AgentRuntimeEventSink, AgentRuntimeExecutableDiscoveryError, AgentRuntimeExecutableNotFoundError, AgentRuntimeExecutableSource, AgentRuntimeFactory, AgentRuntimeLifecycleState, AgentRuntimeManifest, AgentRuntimePaths, AgentRuntimePolicy, AgentRuntimeProbeIssue, AgentRuntimeProbeRequest, AgentRuntimeProbeResult, AgentRuntimeProviderRegistration, AgentRuntimeProviderRegistry, AgentRuntimeProviderUnavailableError, AgentRuntimeState, AgentRuntimeWorkspace, AgentSteerRequest, AgentTextInputItem, AgentTextOutputItem, AgentTurnErrorReporter, AgentTurnFailure, AgentTurnRunner, AgentTurnRunnerOptions, AgentUsage, AgentWorkspaceManager, AgentWorkspaceManagerOptions, BaseAgentRuntime, BaseAgentRuntimeOptions, BoundAccountComputerResolution, CLAUDE_CODE_AGENT_RUNTIME_MANIFEST, CLAUDE_CODE_MAX_LINE_BYTES, CLAUDE_CODE_MAX_STDERR_BYTES, CLIENT_ERROR_REPORT_TIMEOUT_MS, CODEX_AGENT_RUNTIME_APP_SERVER_ARGS, CODEX_AGENT_RUNTIME_MANIFEST, CODEX_APP_SERVER_MAX_LINE_BYTES, CODEX_APP_SERVER_MAX_STDERR_BYTES, CODEX_APP_SERVER_REQUEST_TIMEOUT_MS, COMPUTER_IDENTITY_FILE_NAME, CONTEXT_TREE_PACKAGED_SKILL_DIRECTORIES, CREDENTIALS_FILE_NAME, ClaudeCodeAgentRuntime, ClaudeCodeAgentRuntimeFactory, ClaudeCodeAgentRuntimeFactoryOptions, ClaudeCodeProcess, ClaudeCodeProcessClient, ClaudeCodeProcessError, ClaudeCodeProcessResult, ClaudeCodeProcessSpawnOptions, ClaudeCodeSpawnOptions, ClientErrorReportMetadata, ClientLogBindings, ClientLogger, ClientLoggerServiceOptions, ClientRuntime, ClientRuntimeOptions, ClientRuntimeProviderStartError, CloudSandboxCommandOptions, CloudSandboxCredentialBridge, CloudSandboxCredentialBridgeOpenOptions, CodexAgentRuntime, CodexAgentRuntimeFactory, CodexAgentRuntimeFactoryOptions, CodexAppServerClient, CodexAppServerError, CodexAppServerMessage, CodexAppServerProcess, CodexAppServerRequest, CodexProcessSpawnOptions, CodexSpawnOptions, ComposedClientRuntime, ComputerIdentity, ContextTreeExecFile, ContextTreeManager, ContextTreeManagerOptions, ContextTreePackage, ContextTreeStatus, CreateAgentRuntimeRequest, CreateClientRuntimeOptions, CreateLoggerOptions, CustodyResult, DEFAULT_RUNTIME_RETRY_POLICY, DeliveryDecision, DurableFailure, DurableRetryability, DurableWorkKind, DurableWorkRecord, DurableWorkStatus, ExecuteProviderCliTurnPlanOptions, ExpectedSkillBundle, FeishuTokenExchangeError, FileRuntimeDurabilityStore, IgnoredProviderCliCandidate, ImCredentialEnvironmentError, ImCredentialEnvironmentManager, ImCredentialEnvironmentManagerOptions, ImCredentialGrantSubject, ImResourceFetcher, IntegrationCliId, IntegrationCliInstallation, InteractiveCodexAppServerClient, JsonPrimitive, JsonValue, LiveTurnOwner, LocalComputerConfigurationInspection, LocalConfigurationStatus, LocalSessionBinding, MACHINE_CREDENTIALS_FILE_NAME, MAX_PROVIDER_CLI_EXECUTABLE_BYTES, MAX_PROVIDER_CLI_TURN_IDENTITY_BYTES, MAX_PROVIDER_CLI_TURN_PLAN_BYTES, MachineComputerCredential, ManagedContextTreeStatus, ManagedEnvironment, ManagedSessionContext, MemoryRuntimeDurabilityStore, OpenTagApi, OpenTagApiError, OpenTagHomeLayout, PI_AGENT_RUNTIME_MANIFEST, PI_RPC_MAX_LINE_BYTES, PI_RPC_MAX_STDERR_BYTES, PI_RPC_REQUEST_TIMEOUT_MS, PROCESS_ERROR_FLUSH_WAIT_MS, PROCESS_ERROR_REPORT_WAIT_MS, PROVIDER_CLI_CATALOG, PROVIDER_CLI_LOCK_BUSY_MAX_ATTEMPTS, PROVIDER_CLI_LOCK_BUSY_RETRY_DELAY_MS, PROVIDER_CLI_SELECTION_SCHEMA_VERSION, PROVIDER_CLI_TURN_PLAN_SCHEMA_VERSION, PackedSkillDirectory, PiAgentRuntime, PiAgentRuntimeFactory, PiAgentRuntimeFactoryOptions, PiRpcClient, PiRpcError, PiRpcProcess, PiRpcProcessSpawnOptions, PiRpcSpawnOptions, PlatformSource, PreparedImCredentialEnvironment, PreparedRuntimeCredentialEnvironment, PreparedWebToolsLaunch, ProbeAgentRuntimeCliInstallationsOptions, ProbeIntegrationCliInstallationsOptions, ProcessErrorOrigin, ProcessErrorReportingOptions, ProcessErrorTarget, ProtectedWorkCount, ProtectedWorkSnapshot, ProviderCliAccountError, ProviderCliAccountLayout, ProviderCliArchiveError, ProviderCliCandidate, ProviderCliCandidateReport, ProviderCliCatalogArtifact, ProviderCliCatalogEntry, ProviderCliDetectOptions, ProviderCliDetection, ProviderCliDiagnostic, ProviderCliDiagnosticCode, ProviderCliEnsureAction, ProviderCliEnsureOptions, ProviderCliEnsureResult, ProviderCliExecFile, ProviderCliExecutableFormat, ProviderCliFetcher, ProviderCliFileIdentity, ProviderCliGlobalCommandStatus, ProviderCliInspection, ProviderCliInstallError, ProviderCliInstaller, ProviderCliInstallerOptions, ProviderCliLocalState, ProviderCliLockBusyError, ProviderCliManagedInstall, ProviderCliManager, ProviderCliManagerDeps, ProviderCliPhase, ProviderCliPhaseEvent, ProviderCliPhaseRecord, ProviderCliPreparedTurnPlan, ProviderCliProbeContract, ProviderCliProbeOutcome, ProviderCliProvider, ProviderCliReconciler, ProviderCliReconcilerOptions, ProviderCliSelection, ProviderCliSelectionRecord, ProviderCliTrust, ProviderCliTurnLauncherSpec, ProviderCliTurnPlan, ProviderCliTurnPlanCommand, ProviderCliTurnPlanError, ProviderCliTurnPlanErrorCode, ProviderCliTurnPlanManager, ProviderCliTurnPlanManagerDeps, ProviderCliTurnPlanPrepareInput, ProviderCliValidationRequest, ProviderCliValidationRunner, ProviderCliValidationRunnerOptions, ProviderCliWarning, ProviderCliWarningCode, RUNNER_CLI_NAME, RUNNER_IDENTITY_SCHEMA_VERSION, RUNTIME_CREDENTIAL_CAPABILITY, RUNTIME_EXECUTION_MAX_LIFETIME_MS, RUNTIME_PROVIDER_ORIGIN_HEADER, RUNTIME_PROVIDER_PROXY_CAPABILITY, RUNTIME_PROVIDER_PROXY_PATH, RUNTIME_PROXY_ALLOWED_CONNECT_HOSTS, RUNTIME_PROXY_DATA_BINARY_FRAME_MAX_BYTES, RUNTIME_PROXY_DATA_CHUNK_BYTES, RUNTIME_PROXY_DATA_HEADER_MAX_BYTES, RUNTIME_PROXY_DATA_INITIAL_CREDIT_BYTES, RUNTIME_PROXY_DATA_MAX_STREAMS, RUNTIME_PROXY_GIT_HELPER_MARKER, RUNTIME_PROXY_HANDLE_PATH_PREFIX, RUNTIME_PROXY_PROVIDERS, RUNTIME_PROXY_SHIM_MARKER, RUNTIME_PROXY_TICKET_TTL_MS, RUNTIME_WEB_TOOLS_CAPABILITY, ReadBundleBodyOptions, RecordedInput, ReportClientErrorOptions, ResolveAgentRuntimeExecutableOptions, ResolvedAgentRuntimeExecutable, ResolvedClaudeCodeFactoryOptions, ResolvedCodexFactoryOptions, ResolvedPiFactoryOptions, ResumeAgentRuntimeRequest, RuntimeBusinessFrame, RuntimeConnection, RuntimeConnectionError, RuntimeConnectionErrorCategory, RuntimeConnectionOptions, RuntimeConnectionState, RuntimeCredentialEnvironmentManager, RuntimeCredentialEnvironmentManagerOptions, RuntimeCredentialGrant, RuntimeCredentialMode, RuntimeCredentialPrepareSubject, RuntimeCredentialRelay, RuntimeCredentialRelayError, RuntimeCredentialRelayErrorCode, RuntimeCredentialRelayOptions, RuntimeCredentialResult, RuntimeCredentialRevoked, RuntimeCredentialRunSubject, RuntimeCredentialServerFrame, RuntimeDurabilityFailure, RuntimeDurabilityMetrics, RuntimeDurabilityMetricsSnapshot, RuntimeDurabilityStore, RuntimeExecutionOpenRequest, RuntimeExecutionOpenResult, RuntimeExecutionProvider, RuntimeExecutionSandbox, RuntimeExecutionService, RuntimeExecutionSource, RuntimeLocalPolicy, RuntimePreparation, RuntimeProxyAdapterStreamRequest, RuntimeProxyCliMetadata, RuntimeProxyDataConnectInput, RuntimeProxyDataConnection, RuntimeProxyDataConnectionFactory, RuntimeProxyDataConnectionLike, RuntimeProxyDataConnectionOptions, RuntimeProxyDataError, RuntimeProxyDataErrorCode, RuntimeProxyEnvironment, RuntimeProxyEnvironmentInput, RuntimeProxyExecutionLayout, RuntimeProxyLoopbackAdapter, RuntimeProxyLoopbackAdapterOptions, RuntimeProxyLoopbackCaMaterial, RuntimeProxyLoopbackError, RuntimeProxyMaterialStore, RuntimeProxyOpenStreamRequest, RuntimeProxyProvider, RuntimeProxyStreamResponse, RuntimeQueueLimits, RuntimeRelayScheduler, RuntimeRetryPolicy, RuntimeRetryScheduler, RuntimeSendError, RuntimeSendErrorCode, RuntimeSendOptions, RuntimeSendPriority, RuntimeStorageError, SERVER_HEALTH_TIMEOUT_MS, SESSION_BINDING_SCHEMA_VERSION, SESSION_RECORDED_INPUT_LIMIT, SKILL_CONTENT_SIDECAR_FILE, SKILL_PULL_BUNDLE_TIMEOUT_MS, SKILL_SYNC_DEFAULT_BUDGET_MS, ServerHealthConfigurationError, ServerHealthHttpError, ServerHealthNetworkError, ServerHealthResponseError, ServerHealthTimeoutError, ServerRuntimeDurabilityStore, ServerRuntimeDurabilityStoreOptions, SessionActivity, SessionActivityPhase, SessionBindingConflictError, SessionBindingStore, SessionBindingStoreOptions, SessionCliProofManager, SessionMessageInbox, SessionMessageInboxOptions, SessionMessageTurnContext, SessionPreparationResult, SessionProtectedWorkSnapshot, SessionReconciler, SessionReconcilerOptions, SessionRuntimeManager, SessionRuntimeManagerOptions, SessionRuntimeState, SessionTurnIdentity, SkillArchiveError, SkillArchiveErrorCode, SkillDirectoryMarkerInput, SkillSyncAgentInput, SkillSyncApi, SkillSyncManager, SkillSyncManagerOptions, SkillSyncResult, SkillSyncStatus, StoredAccountIdentity, StoredAccountIdentitySchema, StoredCredentials, StoredMachineCredentials, StoredSessionCliProof, TURN_TRACE_BATCH_SOFT_LIMIT_BYTES, TURN_TRACE_MAX_BUFFER_BYTES, TURN_TRACE_MAX_BUFFER_EVENTS, TURN_TRACE_SEND_DEADLINE_MS, TokenProviderOptions, TurnCustodyOwner, TurnCustodyOwnerOptions, TurnReportOwner, TurnReportOwnerOptions, TurnReportOwnerStoppedError, TurnReportRearmClaim, TurnReportSubmitOptions, TurnReportTerminalStatus, TurnTraceBuffer, TurnTraceBufferOptions, TurnTraceSummary, UnresolvedTurn, UnresolvedTurnPhase, UpdateManager, UpdateManagerOptions, UpdaterAttempt, UpdaterRecoveryStatus, UpdaterStateName, UpdaterStateSnapshot, WebGatewayDispatch, WebGatewayDispatchError, WebToolsClientError, WebToolsGatewayServer, WebToolsGatewayServerOptions, WebToolsServerClient, WebToolsServerClientOptions, accountIdentityMatchesCredentials, accountIdentityPath, agentRuntimePaths, allocateComputerIdentity, assembleContextTreeSkills, assertRealDirectory, assertWithin, buildAgentInput, buildClientErrorReport, buildRuntimeProxyEnvironment, buildSessionMessageInput, catalogExecutableDigests, checkServerHealth, classifyLarkAuthStatus, classifySlackAuthTest, classifySpawnFailure, claudeCodeAgentRuntimeEnvironment, claudeCodeProcessEnvironment, codexAgentRuntimeEnvironment, codexDesktopAppBinDirs, computeFileIdentity, computeTargetFingerprint, computerIdentityPath, configureClientLoggerContext, configureClientLoggerForService, copyIsolatedPiConfig, createClientRuntime, createLogger, createProviderCliFetcher, createRunnerIdentity, credentialsFingerprint, credentialsPath, defaultProviderCliExecFile, defaultProviderCliFetcher, defaultRuntimeProxyDataConnectionFactory, defaultRuntimeRetryScheduler, deriveProviderCliHomeNamespace, deriveProviderCliRunKey, deriveProviderCliSessionKey, deriveProviderCliValidationRequestKey, deriveRuntimeKey, describePlatform, detectProviderCliCandidates, ensurePrivateDirectory, exchangeFeishuTenantToken, executableFormatSupportsHost, executeProviderCliTurnPlan, extractBoundedJson, extractProviderCliExecutable, extractSkillArchive, findCatalogArtifact, findProviderCliCatalogEntry, generateExecutionCa, hashSkillDirectory, inspectExecutableFormat, inspectGlobalCommand, inspectLocalComputerConfiguration, inspectProviderCliLauncher, installProcessErrorReporting, isSkillMaterializationTarget, isSyncedWorkspace, iterateAgentRuntimeExecutables, linuxAmd64ProviderCliPlans, machineCredentialsPath, mapProviderCliLocalStateToReadiness, markSkillDirectoryManaged, normalizeServerUrl, packSkillDirectory, parseProviderCliTurnPlan, parseProviderCliTurnRunnerArgv, parseRunnerCliArgv, parseRunnerIdentity, parseRuntimeCredentialServerFrame, piAgentRuntimeEnvironment, prepareContextTreeHome, probeAgentRuntimeCliInstallations, probeIntegrationCliInstallations, probeProviderCliExecutable, probeRunnerTools, providerCliArtifactId, providerCliCommandForProvider, providerCliLauncherPath, providerCliLockFilePath, providerCliProbeEnvironment, providerCliSelectionTargetPath, providerCliStateFilePath, providerCliVersionDirPath, providerReadiness, rankProviderCliCandidates, readAccountIdentity, readBundleBody, readComputerIdentity, readCredentials, readDurableJson, readMachineCredentials, readMachineCredentialsStrict, readPrivateJson, readProviderCliSelection, readProviderCliTurnPlan, readSecureFile, readSessionCliProofFile, reconcileProviderCliLauncher, reconcileProviderCliShim, redactAcceptanceRecord, removeAccountIdentity, renderManagedSystemPrompt, renderProviderCliLauncher, renderProviderCliShim, renderProviderCliTurnLauncher, renderRuntimeProxyGitCredentialHelper, renderRuntimeProxyShim, reportClientError, requireProviderCliCatalogEntry, resolveAccountHome, resolveAgentRuntimeExecutable, resolveBoundAccountComputer, resolveCodexHome, resolveComputerIdentity, resolveContextTreeHome, resolveContextTreePackage, resolveMaterializationWorkspace, resolveOpenTagHome, resolveOpenTagHomeLayout, resolvePiHome, resolveProviderCliAccountLayout, resolveProviderCliArtifactUrl, resolveProviderCliTurnRunnerInvocation, resolveWebToolsExtensionPath, resolvedClaudeCodeFactory, resolvedCodexFactory, resolvedPiFactory, retryDelay, retryExhausted, rotateAccountIdentityFingerprint, runContextTreeCli, runProviderCliTurnRunner, runRunnerAcceptance, runRunnerCli, serializeEnvironment, sessionBindingPath, skillRootForProvider, snapshotPath, storeBoundAccountComputer, validatePrivateDirectory, verifyProviderCliCandidateFingerprint, verifySkillBundle, wellKnownAgentRuntimeBinDirs, withProviderCliLock, writeAccountIdentityAtomically, writeComputerIdentityAtomically, writeCredentialsAtomically, writeDurableFile, writeDurableJson, writeMachineCredentialsAtomically, writePrivateJson, writeProviderCliSelection };
+  export { ACCOUNT_IDENTITY_FILE_NAME, AGENT_RUNTIME_BINDING_MAX_BYTES, AGENT_RUNTIME_CONTRACT_VERSION, AGENT_RUNTIME_DESCRIPTION_MAX_BYTES, AGENT_RUNTIME_ID_MAX_BYTES, AGENT_RUNTIME_TEXT_MAX_BYTES, AccessTokenLease, AccessTokenProvider, AccountIdentityRotation, AdmissionController, AdmissionDecision, AdmissionLimits, AdmissionPhase, AdmissionReservation, AdmissionSnapshot, AgentAbortRequest, AgentApprovalResponse, AgentHostedToolCall, AgentHostedToolContent, AgentHostedToolDefinition, AgentHostedToolError, AgentHostedToolHandler, AgentHostedToolResult, AgentHostedTools, AgentInput, AgentInputItem, AgentInteractionRequest, AgentInteractionResponse, AgentOutputItem, AgentPromptRequest, AgentProviderError, AgentProviderRunContext, AgentProviderRunEvent, AgentProviderRunResult, AgentQuestionResponse, AgentRunConfiguration, AgentRunError, AgentRunErrorCode, AgentRunId, AgentRunResult, AgentRunStatus, AgentRuntime, AgentRuntimeBinding, AgentRuntimeCapabilities, AgentRuntimeCliInstallation, AgentRuntimeConfigurationOptionsRequest, AgentRuntimeError, AgentRuntimeErrorCode, AgentRuntimeEvent, AgentRuntimeEventSink, AgentRuntimeExecutableDiscoveryError, AgentRuntimeExecutableNotFoundError, AgentRuntimeExecutableSource, AgentRuntimeFactory, AgentRuntimeLifecycleState, AgentRuntimeManifest, AgentRuntimePaths, AgentRuntimePolicy, AgentRuntimeProbeIssue, AgentRuntimeProbeRequest, AgentRuntimeProbeResult, AgentRuntimeProviderRegistration, AgentRuntimeProviderRegistry, AgentRuntimeProviderUnavailableError, AgentRuntimeState, AgentRuntimeWorkspace, AgentSteerRequest, AgentTextInputItem, AgentTextOutputItem, AgentTurnErrorReporter, AgentTurnFailure, AgentTurnRunner, AgentTurnRunnerOptions, AgentUsage, AgentWorkspaceManager, AgentWorkspaceManagerOptions, BaseAgentRuntime, BaseAgentRuntimeOptions, BoundAccountComputerResolution, CLAUDE_CODE_AGENT_RUNTIME_MANIFEST, CLAUDE_CODE_MAX_LINE_BYTES, CLAUDE_CODE_MAX_STDERR_BYTES, CLIENT_ERROR_REPORT_TIMEOUT_MS, CODEX_AGENT_RUNTIME_APP_SERVER_ARGS, CODEX_AGENT_RUNTIME_MANIFEST, CODEX_APP_SERVER_MAX_LINE_BYTES, CODEX_APP_SERVER_MAX_STDERR_BYTES, CODEX_APP_SERVER_REQUEST_TIMEOUT_MS, COMPUTER_IDENTITY_FILE_NAME, CONTEXT_TREE_PACKAGED_SKILL_DIRECTORIES, CREDENTIALS_FILE_NAME, ClaudeCodeAgentRuntime, ClaudeCodeAgentRuntimeFactory, ClaudeCodeAgentRuntimeFactoryOptions, ClaudeCodeProcess, ClaudeCodeProcessClient, ClaudeCodeProcessError, ClaudeCodeProcessResult, ClaudeCodeProcessSpawnOptions, ClaudeCodeSpawnOptions, ClientErrorReportMetadata, ClientLogBindings, ClientLogger, ClientLoggerServiceOptions, ClientRuntime, ClientRuntimeOptions, ClientRuntimeProviderStartError, CloudSandboxCommandOptions, CloudSandboxCredentialBridge, CloudSandboxCredentialBridgeOpenOptions, CodexAgentRuntime, CodexAgentRuntimeFactory, CodexAgentRuntimeFactoryOptions, CodexAppServerClient, CodexAppServerError, CodexAppServerMessage, CodexAppServerProcess, CodexAppServerRequest, CodexProcessSpawnOptions, CodexSpawnOptions, ComposedClientRuntime, ComputerIdentity, ContextTreeExecFile, ContextTreeManager, ContextTreeManagerOptions, ContextTreePackage, ContextTreeStatus, CreateAgentRuntimeRequest, CreateClientRuntimeOptions, CreateLoggerOptions, CustodyResult, DEFAULT_RUNTIME_RETRY_POLICY, DeliveryDecision, DurableFailure, DurableRetryability, DurableWorkKind, DurableWorkRecord, DurableWorkStatus, ExecuteProviderCliTurnPlanOptions, ExpectedSkillBundle, FeishuTokenExchangeError, FileRuntimeDurabilityStore, IgnoredProviderCliCandidate, ImCredentialEnvironmentError, ImCredentialEnvironmentManager, ImCredentialEnvironmentManagerOptions, ImCredentialGrantSubject, ImResourceFetcher, IntegrationCliId, IntegrationCliInstallation, InteractiveCodexAppServerClient, JsonPrimitive, JsonValue, LiveTurnOwner, LocalComputerConfigurationInspection, LocalConfigurationStatus, LocalSessionBinding, MACHINE_CREDENTIALS_FILE_NAME, MAX_PROVIDER_CLI_EXECUTABLE_BYTES, MAX_PROVIDER_CLI_TURN_IDENTITY_BYTES, MAX_PROVIDER_CLI_TURN_PLAN_BYTES, MachineComputerCredential, ManagedContextTreeStatus, ManagedEnvironment, ManagedSessionContext, MemoryRuntimeDurabilityStore, OpenTagApi, OpenTagApiError, OpenTagHomeLayout, PI_AGENT_RUNTIME_MANIFEST, PI_RPC_MAX_LINE_BYTES, PI_RPC_MAX_STDERR_BYTES, PI_RPC_REQUEST_TIMEOUT_MS, PROCESS_ERROR_FLUSH_WAIT_MS, PROCESS_ERROR_REPORT_WAIT_MS, PROVIDER_CLI_CATALOG, PROVIDER_CLI_LOCK_BUSY_MAX_ATTEMPTS, PROVIDER_CLI_LOCK_BUSY_RETRY_DELAY_MS, PROVIDER_CLI_SELECTION_SCHEMA_VERSION, PROVIDER_CLI_TURN_PLAN_SCHEMA_VERSION, PackedSkillDirectory, PiAgentRuntime, PiAgentRuntimeFactory, PiAgentRuntimeFactoryOptions, PiRpcClient, PiRpcError, PiRpcProcess, PiRpcProcessSpawnOptions, PiRpcSpawnOptions, PlatformSource, PreparedImCredentialEnvironment, PreparedRuntimeCredentialEnvironment, PreparedWebToolsLaunch, ProbeAgentRuntimeCliInstallationsOptions, ProbeIntegrationCliInstallationsOptions, ProcessErrorOrigin, ProcessErrorReportingOptions, ProcessErrorTarget, ProtectedWorkCount, ProtectedWorkSnapshot, ProviderCliAccountError, ProviderCliAccountLayout, ProviderCliArchiveError, ProviderCliCandidate, ProviderCliCandidateReport, ProviderCliCatalogArtifact, ProviderCliCatalogEntry, ProviderCliDetectOptions, ProviderCliDetection, ProviderCliDiagnostic, ProviderCliDiagnosticCode, ProviderCliEnsureAction, ProviderCliEnsureOptions, ProviderCliEnsureResult, ProviderCliExecFile, ProviderCliExecutableFormat, ProviderCliFetcher, ProviderCliFileIdentity, ProviderCliGlobalCommandStatus, ProviderCliInspection, ProviderCliInstallError, ProviderCliInstaller, ProviderCliInstallerOptions, ProviderCliLocalState, ProviderCliLockBusyError, ProviderCliManagedInstall, ProviderCliManager, ProviderCliManagerDeps, ProviderCliPhase, ProviderCliPhaseEvent, ProviderCliPhaseRecord, ProviderCliPreparedTurnPlan, ProviderCliProbeContract, ProviderCliProbeOutcome, ProviderCliProvider, ProviderCliReconciler, ProviderCliReconcilerOptions, ProviderCliSelection, ProviderCliSelectionRecord, ProviderCliTrust, ProviderCliTurnLauncherSpec, ProviderCliTurnPlan, ProviderCliTurnPlanCommand, ProviderCliTurnPlanError, ProviderCliTurnPlanErrorCode, ProviderCliTurnPlanManager, ProviderCliTurnPlanManagerDeps, ProviderCliTurnPlanPrepareInput, ProviderCliValidationRequest, ProviderCliValidationRunner, ProviderCliValidationRunnerOptions, ProviderCliWarning, ProviderCliWarningCode, RUNNER_CLI_NAME, RUNNER_IDENTITY_SCHEMA_VERSION, RUNTIME_CREDENTIAL_CAPABILITY, RUNTIME_EXECUTION_MAX_LIFETIME_MS, RUNTIME_PROVIDER_ORIGIN_HEADER, RUNTIME_PROVIDER_PROXY_CAPABILITY, RUNTIME_PROVIDER_PROXY_PATH, RUNTIME_PROXY_ALLOWED_CONNECT_HOSTS, RUNTIME_PROXY_DATA_BINARY_FRAME_MAX_BYTES, RUNTIME_PROXY_DATA_CHUNK_BYTES, RUNTIME_PROXY_DATA_HEADER_MAX_BYTES, RUNTIME_PROXY_DATA_INITIAL_CREDIT_BYTES, RUNTIME_PROXY_DATA_MAX_STREAMS, RUNTIME_PROXY_GIT_HELPER_MARKER, RUNTIME_PROXY_HANDLE_PATH_PREFIX, RUNTIME_PROXY_PROVIDERS, RUNTIME_PROXY_SHIM_MARKER, RUNTIME_PROXY_TICKET_TTL_MS, RUNTIME_WEB_TOOLS_CAPABILITY, ReadBundleBodyOptions, RecordedInput, ReportClientErrorOptions, ResolveAgentRuntimeExecutableOptions, ResolvedAgentRuntimeExecutable, ResolvedClaudeCodeFactoryOptions, ResolvedCodexFactoryOptions, ResolvedPiFactoryOptions, ResumeAgentRuntimeRequest, RuntimeBusinessFrame, RuntimeConnection, RuntimeConnectionError, RuntimeConnectionErrorCategory, RuntimeConnectionOptions, RuntimeConnectionState, RuntimeCredentialEnvironmentManager, RuntimeCredentialEnvironmentManagerOptions, RuntimeCredentialGrant, RuntimeCredentialMode, RuntimeCredentialPrepareSubject, RuntimeCredentialRelay, RuntimeCredentialRelayError, RuntimeCredentialRelayErrorCode, RuntimeCredentialRelayOptions, RuntimeCredentialResult, RuntimeCredentialRevoked, RuntimeCredentialRunSubject, RuntimeCredentialServerFrame, RuntimeDurabilityFailure, RuntimeDurabilityMetrics, RuntimeDurabilityMetricsSnapshot, RuntimeDurabilityStore, RuntimeExecutionOpenRequest, RuntimeExecutionOpenResult, RuntimeExecutionProvider, RuntimeExecutionSandbox, RuntimeExecutionService, RuntimeExecutionSource, RuntimeLocalPolicy, RuntimePreparation, RuntimeProxyAdapterStreamRequest, RuntimeProxyCliMetadata, RuntimeProxyDataConnectInput, RuntimeProxyDataConnection, RuntimeProxyDataConnectionFactory, RuntimeProxyDataConnectionLike, RuntimeProxyDataConnectionOptions, RuntimeProxyDataError, RuntimeProxyDataErrorCode, RuntimeProxyEnvironment, RuntimeProxyEnvironmentInput, RuntimeProxyExecutionLayout, RuntimeProxyLoopbackAdapter, RuntimeProxyLoopbackAdapterOptions, RuntimeProxyLoopbackCaMaterial, RuntimeProxyLoopbackError, RuntimeProxyMaterialStore, RuntimeProxyOpenStreamRequest, RuntimeProxyProvider, RuntimeProxyStreamResponse, RuntimeQueueLimits, RuntimeRelayScheduler, RuntimeRetryPolicy, RuntimeRetryScheduler, RuntimeSendError, RuntimeSendErrorCode, RuntimeSendOptions, RuntimeSendPriority, RuntimeStorageError, SERVER_HEALTH_TIMEOUT_MS, SESSION_BINDING_SCHEMA_VERSION, SESSION_RECORDED_INPUT_LIMIT, SKILL_CONTENT_SIDECAR_FILE, SKILL_PULL_BUNDLE_TIMEOUT_MS, SKILL_SYNC_DEFAULT_BUDGET_MS, ServerHealthConfigurationError, ServerHealthHttpError, ServerHealthNetworkError, ServerHealthResponseError, ServerHealthTimeoutError, ServerRuntimeDurabilityStore, ServerRuntimeDurabilityStoreOptions, SessionActivity, SessionActivityPhase, SessionBindingConflictError, SessionBindingStore, SessionBindingStoreOptions, SessionCliProofManager, SessionMessageInbox, SessionMessageInboxOptions, SessionMessageTurnContext, SessionPreparationResult, SessionProtectedWorkSnapshot, SessionReconciler, SessionReconcilerOptions, SessionRuntimeManager, SessionRuntimeManagerOptions, SessionRuntimeState, SessionTurnIdentity, SkillArchiveError, SkillArchiveErrorCode, SkillDirectoryMarkerInput, SkillSyncAgentInput, SkillSyncApi, SkillSyncManager, SkillSyncManagerOptions, SkillSyncResult, SkillSyncStatus, StoredAccountIdentity, StoredAccountIdentitySchema, StoredCredentials, StoredMachineCredentials, StoredSessionCliProof, TURN_TRACE_BATCH_SOFT_LIMIT_BYTES, TURN_TRACE_MAX_BUFFER_BYTES, TURN_TRACE_MAX_BUFFER_EVENTS, TURN_TRACE_SEND_DEADLINE_MS, TokenProviderOptions, TurnCustodyOwner, TurnCustodyOwnerOptions, TurnReportOwner, TurnReportOwnerOptions, TurnReportOwnerStoppedError, TurnReportRearmClaim, TurnReportSubmitOptions, TurnReportTerminalStatus, TurnTraceBuffer, TurnTraceBufferOptions, TurnTraceSummary, UnresolvedTurn, UnresolvedTurnPhase, UpdateManager, UpdateManagerOptions, UpdaterAttempt, UpdaterRecoveryStatus, UpdaterStateName, UpdaterStateSnapshot, WebGatewayDispatch, WebGatewayDispatchError, WebToolsClientError, WebToolsGatewayServer, WebToolsGatewayServerOptions, WebToolsServerClient, WebToolsServerClientOptions, accountIdentityMatchesCredentials, accountIdentityPath, agentRuntimePaths, allocateComputerIdentity, assembleContextTreeSkills, assertRealDirectory, assertWithin, buildAgentInput, buildClientErrorReport, buildRuntimeProxyEnvironment, buildSessionMessageInput, captureSlackDeploy, catalogExecutableDigests, checkServerHealth, classifyLarkAuthStatus, classifySlackAuthTest, classifySpawnFailure, claudeCodeAgentRuntimeEnvironment, claudeCodeProcessEnvironment, codexAgentRuntimeEnvironment, codexDesktopAppBinDirs, computeFileIdentity, computeTargetFingerprint, computerIdentityPath, configureClientLoggerContext, configureClientLoggerForService, copyIsolatedPiConfig, createClientRuntime, createLogger, createProviderCliFetcher, createRunnerIdentity, credentialsFingerprint, credentialsPath, defaultProviderCliExecFile, defaultProviderCliFetcher, defaultRuntimeProxyDataConnectionFactory, defaultRuntimeRetryScheduler, deriveProviderCliHomeNamespace, deriveProviderCliRunKey, deriveProviderCliSessionKey, deriveProviderCliValidationRequestKey, deriveRuntimeKey, describePlatform, detectProviderCliCandidates, ensurePrivateDirectory, exchangeFeishuTenantToken, executableFormatSupportsHost, executeProviderCliTurnPlan, extractBoundedJson, extractProviderCliExecutable, extractSkillArchive, findCatalogArtifact, findProviderCliCatalogEntry, generateExecutionCa, hashSkillDirectory, inspectExecutableFormat, inspectGlobalCommand, inspectLocalComputerConfiguration, inspectProviderCliLauncher, installProcessErrorReporting, isSkillMaterializationTarget, isSyncedWorkspace, iterateAgentRuntimeExecutables, linuxAmd64ProviderCliPlans, machineCredentialsPath, mapProviderCliLocalStateToReadiness, markSkillDirectoryManaged, normalizeServerUrl, packSkillDirectory, parseProviderCliTurnPlan, parseProviderCliTurnRunnerArgv, parseRunnerCliArgv, parseRunnerIdentity, parseRuntimeCredentialServerFrame, piAgentRuntimeEnvironment, prepareContextTreeHome, prepareSlackCallbackUpdate, probeAgentRuntimeCliInstallations, probeIntegrationCliInstallations, probeProviderCliExecutable, probeRunnerTools, providerCliArtifactId, providerCliCommandForProvider, providerCliLauncherPath, providerCliLockFilePath, providerCliProbeEnvironment, providerCliSelectionTargetPath, providerCliStateFilePath, providerCliVersionDirPath, providerReadiness, rankProviderCliCandidates, readAccountIdentity, readBundleBody, readComputerIdentity, readCredentials, readDurableJson, readMachineCredentials, readMachineCredentialsStrict, readPrivateJson, readProviderCliSelection, readProviderCliTurnPlan, readSecureFile, readSessionCliProofFile, reconcileProviderCliLauncher, reconcileProviderCliShim, redactAcceptanceRecord, removeAccountIdentity, renderManagedSystemPrompt, renderProviderCliLauncher, renderProviderCliShim, renderProviderCliTurnLauncher, renderRuntimeProxyGitCredentialHelper, renderRuntimeProxyShim, reportClientError, requireProviderCliCatalogEntry, resolveAccountHome, resolveAgentRuntimeExecutable, resolveBoundAccountComputer, resolveCodexHome, resolveComputerIdentity, resolveContextTreeHome, resolveContextTreePackage, resolveMaterializationWorkspace, resolveOpenTagHome, resolveOpenTagHomeLayout, resolvePiHome, resolveProviderCliAccountLayout, resolveProviderCliArtifactUrl, resolveProviderCliTurnRunnerInvocation, resolveWebToolsExtensionPath, resolvedClaudeCodeFactory, resolvedCodexFactory, resolvedPiFactory, retryDelay, retryExhausted, rotateAccountIdentityFingerprint, runContextTreeCli, runProviderCliTurnRunner, runRunnerAcceptance, runRunnerCli, runSlackManagement, serializeEnvironment, sessionBindingPath, skillRootForProvider, slackManagementEnvironment, slackManagementHome, snapshotPath, storeBoundAccountComputer, validatePrivateDirectory, verifyProviderCliCandidateFingerprint, verifySkillBundle, wellKnownAgentRuntimeBinDirs, withProviderCliLock, writeAccountIdentityAtomically, writeComputerIdentityAtomically, writeCredentialsAtomically, writeDurableFile, writeDurableJson, writeMachineCredentialsAtomically, writePrivateJson, writeProviderCliSelection };
 }
 //#region src/agent-runtime/types.d.ts
 declare const AGENT_RUNTIME_CONTRACT_VERSION = 2;
@@ -8062,6 +8212,8 @@ interface AgentRunConfiguration {
   readonly provider?: JsonValue;
 }
 interface AgentPromptRequest {
+  /** Exact sockets from trusted execution preparation; never model-supplied or persisted. */
+  readonly allowedUnixSockets?: readonly string[];
   readonly runId: AgentRunId;
   readonly input: AgentInput;
   readonly configuration?: AgentRunConfiguration;
@@ -8460,8 +8612,12 @@ declare class OpenTagApi {
   }, options?: RequestOptions): Promise<Response>;
   listRuntimeDurableWork(machineToken: string, kind: RuntimeDurableWorkKind, options?: RequestOptions): Promise<RuntimeDurableWorkRecord[]>;
   writeRuntimeDurableWork(machineToken: string, record: RuntimeDurableWorkRecord, options?: RequestOptions): Promise<void>;
-  createInternalSession(proof: string, input: SessionCliCreateRequest, options?: RequestOptions): Promise<SessionCliCommandResponse>;
-  sendSessionMessage(proof: string, input: SessionCliSendRequest, options?: RequestOptions): Promise<SessionCliCommandResponse>;
+  createInternalSession(proof: string, input: SessionCliCreateRequest, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<SessionCliCommandResponse>;
+  sendSessionMessage(proof: string, input: SessionCliSendRequest, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<SessionCliCommandResponse>;
   listInternalSessions(proof: string, input: SessionCliListQuery, options?: RequestOptions): Promise<SessionCliListResponse>;
   listAgentSkills(accessToken: string, agentId: string, options?: RequestOptions): Promise<ListAgentSkillsResponse>;
   getAgentSkill(accessToken: string, agentId: string, skillId: string, options?: RequestOptions): Promise<SkillDetail>;
@@ -8482,17 +8638,24 @@ declare class OpenTagApi {
   installRuntimeSkillPreset(proof: string, presetName: string, options?: RequestOptions): Promise<InstallSkillPresetResponse>;
   getRuntimeAgentConfig(proof: string, options?: RequestOptions): Promise<AgentAdminConfig>;
   updateRuntimeAgentConfig(proof: string, input: UpdateSelfAgentRequest, options?: RequestOptions): Promise<AgentAdminConfig>;
-  createRuntimeAgentSchedule(proof: string, input: CreateAgentScheduleRequest, options?: RequestOptions): Promise<AgentSchedule>;
+  createRuntimeAgentSchedule(proof: string, input: CreateAgentScheduleRequest, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<AgentSchedule>;
   listRuntimeAgentSchedules(proof: string, query?: {
     limit?: number;
     cursor?: string;
   }, options?: RequestOptions): Promise<AgentScheduleListResponse>;
   getRuntimeAgentSchedule(proof: string, scheduleId: string, options?: RequestOptions): Promise<AgentSchedule>;
-  updateRuntimeAgentSchedule(proof: string, scheduleId: string, input: UpdateAgentScheduleRequest, options?: RequestOptions): Promise<AgentSchedule>;
+  updateRuntimeAgentSchedule(proof: string, scheduleId: string, input: UpdateAgentScheduleRequest, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<AgentSchedule>;
   pauseRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions): Promise<AgentSchedule>;
-  resumeRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions): Promise<AgentSchedule>;
+  resumeRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<AgentSchedule>;
   deleteRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions): Promise<void>;
   previewRuntimeAgentSchedule(proof: string, input: PreviewAgentScheduleRequest, options?: RequestOptions): Promise<AgentSchedulePreview>;
+  provisionSlackAgent(proof: string, input: ProvisionSlackAgentRequest, options?: RequestOptions): Promise<ProvisionSlackAgentResponse>;
   listRuntimeAgentMcpServers(proof: string, options?: RequestOptions): Promise<ListAgentMCPServersResponse>;
   listRuntimeAgentAvailableMcpServers(proof: string, options?: RequestOptions): Promise<ListAvailableMCPServersResponse>;
   attachRuntimeAgentMcpServer(proof: string, input: AttachMCPServerRequest, options?: RequestOptions): Promise<MCPAgentServer>;
@@ -8791,10 +8954,11 @@ declare function parseRuntimeCredentialServerFrame(value: unknown): RuntimeCrede
 //#endregion
 //#region src/runtime/runtime-proxy-data-client.d.ts
 type RuntimeProxyDataErrorCode = "aborted" | "auth_failed" | "connection_lost" | "connection_closed" | "open_timeout" | "protocol_error" | "queue_full" | "stream_error" | "too_many_streams";
-/** Controlled data-channel failure. `code` identifies the local cause; upstream codes stay in `message`. */
+/** Controlled data-channel failure. `code` identifies the local cause; upstream codes are carried separately and must be allowlisted before presentation. */
 declare class RuntimeProxyDataError extends Error {
   readonly code: RuntimeProxyDataErrorCode;
-  constructor(code: RuntimeProxyDataErrorCode, message: string, options?: ErrorOptions);
+  readonly upstreamCode?: string | undefined;
+  constructor(code: RuntimeProxyDataErrorCode, message: string, options?: ErrorOptions, upstreamCode?: string | undefined);
 }
 interface RuntimeProxyOpenStreamRequest {
   readonly bindingId: string;
@@ -9027,6 +9191,8 @@ interface RuntimeProxyAdapterStreamRequest {
 interface RuntimeProxyLoopbackAdapterOptions {
   /** The single execution this dedicated entry serves. */
   readonly executionId: string;
+  /** Local native gh can use private IPC; Cloud keeps its existing sandbox CONNECT bridge. */
+  readonly githubApiSocket?: boolean;
   readonly generateCa?: (materialDir: string) => Promise<RuntimeProxyLoopbackCaMaterial>;
   /**
    * Execution-local handles held by the Sandbox. Used only to substitute the harmless
@@ -9057,6 +9223,10 @@ declare class RuntimeProxyLoopbackAdapter {
   get connectProxyUrl(): string;
   /** Loopback HTTPS endpoint the Slack launcher pins through `--apihost`. */
   get slackApiHost(): string;
+  /** Private authenticated IPC transport for Local native gh; Cloud uses its sandbox bridge. */
+  get githubApiSocketPath(): string | undefined;
+  /** Native Git's private HTTP IPC entry; the same handle/Relay/Server checks still apply. */
+  get githubGitSocketPath(): string | undefined;
   /** Execution-scoped CA public certificate path for CLI trust configuration. */
   get caCertPath(): string;
   get executionId(): string;
@@ -9225,6 +9395,17 @@ interface ProcessErrorReportingOptions {
  */
 declare function installProcessErrorReporting(options: ProcessErrorReportingOptions): () => void;
 //#endregion
+//#region src/providers/claude-code/credential-probe.d.ts
+interface EnvironmentCredential {
+  token: string;
+  header: string;
+  oauth: boolean;
+  apiKey?: string;
+}
+/** Verify explicit first-party credentials without a model request or touching native login storage. */
+declare function probeClaudeEnvironmentCredential(environment: NodeJS.ProcessEnv, signal?: AbortSignal, readStatus?: typeof requestCredentialStatus): Promise<AgentRuntimeProbeIssue | undefined>;
+declare function requestCredentialStatus(environment: NodeJS.ProcessEnv, credential: EnvironmentCredential, signal?: AbortSignal): Promise<number>;
+//#endregion
 //#region src/providers/claude-code/hosted-tool-bridge.d.ts
 /** The remote MCP gateway for this execution; both fields are opaque to this module. */
 interface ClaudeCodeMcpGatewayEndpoint {
@@ -9306,8 +9487,10 @@ interface ClaudeCodeAgentRuntimeFactoryOptions {
   readonly createProcess?: (cwd: string, args: readonly string[], environment?: Readonly<Record<string, string>>) => ClaudeCodeProcessClient;
   readonly createSessionId?: () => string;
   readonly startHostedToolBridge?: typeof startClaudeCodeHostedToolBridge;
+  readonly verifyCredential?: typeof probeClaudeEnvironmentCredential;
   readonly probeRunner?: (signal?: AbortSignal) => Promise<{
     readonly credential: boolean;
+    readonly credentialIssue?: AgentRuntimeProbeIssue;
     readonly streamJson: boolean;
     readonly version: string;
   }>;
@@ -9420,7 +9603,7 @@ declare class CodexAppServerProcess implements InteractiveCodexAppServerClient {
 }
 //#endregion
 //#region src/providers/codex/agent-runtime.d.ts
-declare const CODEX_AGENT_RUNTIME_APP_SERVER_ARGS: readonly ["app-server", "--stdio", "--disable", "apps", "--disable", "auth_elicitation", "--disable", "browser_use", "--disable", "browser_use_external", "--disable", "browser_use_full_cdp_access", "--disable", "computer_use", "--disable", "goals", "--disable", "hooks", "--disable", "image_generation", "--disable", "in_app_browser", "--disable", "multi_agent", "--disable", "plugins", "--disable", "remote_plugin", "--disable", "shell_snapshot", "--disable", "skill_mcp_dependency_install", "-c", "mcp_servers={}", "-c", 'web_search="disabled"', "-c", "tools.view_image=true", "-c", "memories.use_memories=false", "-c", "memories.generate_memories=false", "-c", "allow_login_shell=false", "-c", 'shell_environment_policy.inherit="all"', "-c", 'shell_environment_policy.filters={ PATH = "include", ZDOTDIR = "include", LANG = "include", LC_ALL = "include", OPENTAG_HOME = "include", OPENTAG_PROVIDER_ENV_FILE = "include", OPENTAG_SESSION_PROOF_FILE = "include" }'];
+declare const CODEX_AGENT_RUNTIME_APP_SERVER_ARGS: readonly ["app-server", "--stdio", "--disable", "apps", "--disable", "auth_elicitation", "--disable", "browser_use", "--disable", "browser_use_external", "--disable", "browser_use_full_cdp_access", "--disable", "computer_use", "--disable", "goals", "--disable", "hooks", "--disable", "image_generation", "--disable", "in_app_browser", "--disable", "multi_agent", "--disable", "plugins", "--disable", "remote_plugin", "--disable", "shell_snapshot", "--disable", "skill_mcp_dependency_install", "-c", "mcp_servers={}", "-c", 'web_search="disabled"', "-c", "tools.view_image=true", "-c", "memories.use_memories=false", "-c", "memories.generate_memories=false", "-c", "allow_login_shell=false", "-c", 'shell_environment_policy.inherit="all"', "-c", 'shell_environment_policy.filters={ PATH = "include", ZDOTDIR = "include", LANG = "include", LC_ALL = "include", OPENTAG_HOME = "include", OPENTAG_PROVIDER_ENV_FILE = "include", OPENTAG_SESSION_PROOF_FILE = "include", OPENTAG_EXECUTION_ID = "include" }'];
 declare const CODEX_AGENT_RUNTIME_MANIFEST: AgentRuntimeManifest;
 interface CodexRuntimeOptions {
   readonly client: InteractiveCodexAppServerClient;
@@ -10405,6 +10588,7 @@ interface RuntimeProxyExecutionLayout {
 }
 interface RuntimeProxyEnvironmentInput {
   readonly adapterCaCertPath: string;
+  readonly executionId?: string;
   readonly cliMetadata: (provider: RuntimeProxyProvider) => RuntimeProxyCliMetadata | undefined;
   readonly connectProxyUrl: string;
   readonly handles: ReadonlyMap<RuntimeProxyProvider, string>;
@@ -10418,7 +10602,7 @@ interface RuntimeProxyEnvironmentInput {
  * GitHub target resolution stays with cwd, `-R`, and the canonical remote path.
  */
 declare function buildRuntimeProxyEnvironment(input: RuntimeProxyEnvironmentInput): RuntimeProxyEnvironment;
-declare function renderRuntimeProxyGitCredentialHelper(handle: string): string;
+declare function renderRuntimeProxyGitCredentialHelper(handle: string, privateHttp?: boolean): string;
 declare function renderRuntimeProxyShim(binary: string, environmentFilePath: string): string;
 /**
  * Per-Session proxy material store. The stable env file/manifest/shims point at the
@@ -10446,6 +10630,8 @@ declare class RuntimeProxyMaterialStore {
     readonly environment: RuntimeProxyEnvironment;
     readonly executionId: string;
     readonly handles: ReadonlyMap<RuntimeProxyProvider, string>;
+    readonly githubApiSocketPath?: string;
+    readonly githubGitSocketPath?: string;
     readonly platform: NodeJS.Platform;
     readonly sessionId: string;
   }): Promise<RuntimeProxyExecutionLayout>;
@@ -10507,6 +10693,8 @@ interface PreparedMcpGatewayLaunch {
   readonly token: string;
 }
 interface PreparedRuntimeCredentialEnvironment {
+  /** Local-only exact proxy socket for this execution. Cloud uses its mounted bridge. */
+  readonly allowedUnixSockets?: readonly string[];
   /** Present in proxy mode; exact-execution cleanup token. */
   readonly executionId?: string;
   /** Execution environment manifest merged by the Turn launcher. */
@@ -11088,6 +11276,9 @@ interface DeliveryDecision {
 }
 interface ClientRuntimeOptions {
   handleApproval?(request: RuntimeApprovalDecision): Promise<RuntimeApprovalResult>;
+  slackAutoSetup?: {
+    run(request: SlackAutoSetupRuntimeRequest, signal?: AbortSignal): Promise<SlackAutoSetupRuntimeResult["result"]>;
+  };
   contextTreeSettings?: {
     run(frame: ContextTreeOperationFrame): Promise<ContextTreeOperationResponse>;
     close?(): void;
@@ -11650,6 +11841,8 @@ interface CreateClientRuntimeOptions {
   readonly piCommand?: string;
   readonly piHome?: string;
   readonly cliCommand?: string;
+  /** Authoritative packaged CLI entry for the Slack deployment hook; absent embeddings use manual setup. */
+  readonly slackAutoSetupCliEntry?: string;
   readonly environment?: NodeJS.ProcessEnv;
   readonly factory?: AgentRuntimeFactory;
   readonly factories?: readonly AgentRuntimeFactory[];
@@ -12599,6 +12792,36 @@ interface ReadBundleBodyOptions {
 }
 declare function readBundleBody(response: Response, options: ReadBundleBodyOptions): Promise<Uint8Array>;
 //#endregion
+//#region src/slack-management.d.ts
+declare function slackManagementHome(environment?: NodeJS.ProcessEnv): string;
+declare function slackManagementEnvironment(environment: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+declare function runSlackManagement(args: string[], options?: {
+  outputFile?: string;
+  projectDir?: string;
+  team?: string;
+  environment?: NodeJS.ProcessEnv;
+  binary?: string;
+  accountHome?: string;
+  signal?: AbortSignal;
+  errorFile?: string;
+  nonInteractive?: boolean;
+  requestAppApproval?: boolean;
+}): Promise<number>;
+/** Prepare only the callback update from a successful CLI result and the current remote manifest. */
+declare function prepareSlackCallbackUpdate(options: {
+  manifestFile: string;
+  provisionResultFile: string;
+  outputFile: string;
+  environment?: NodeJS.ProcessEnv;
+}): Promise<void>;
+/** Called only by the official deploy hook; writes the complete material without logging it. */
+declare function captureSlackDeploy(options: {
+  createResponseFile: string;
+  outputFile: string;
+  environment?: NodeJS.ProcessEnv;
+  fetchImpl?: typeof fetch;
+}): Promise<void>;
+//#endregion
 //#region src/storage/context-tree-home.d.ts
 /** Account storage shared with the standalone Context Tree CLI, independent of OPENTAG_HOME. */
 declare function resolveContextTreeHome(environment?: NodeJS.ProcessEnv): {